-
Government and defense organizations in India
November 6, 2023
•
[ espionage, malware, government ]
Researchers from Seqrite discover multiple campaigns of the Pakistan-based APT SideCopy, targeting Indian government and defense entities, exploiting the recent WinRAR vulnerability CVE-2023-38831 to deploy AllaKore RAT, DRat and additional payloads.
-
TRISTAR Insurance Group
November 4, 2023
•
[ hack, finance ]
TRISTAR Insurance Group (TRISTAR) files a notice of data breach after discovering that an unauthorized party was able to access its computer network through a cyberattack.
-
Summit Health
November 3, 2023
•
[ ransomware, leak, malware ]
Summit Health is added in the LockBit 3.0 ransomware group leak site.
-
Public healthcare institutions in Singapore
November 3, 2023
•
[ hack, ddos, healthcare ]
Threat actors disrupt internet connectivity in public healthcare institutions in Singapore with distributed denial-of-service (DDoS) attacks.
-
BHS Physicians Network
November 2, 2023
•
[ hack, misconfiguration, healthcare ]
BHS Physicians Network confirms a breach of a Microsoft Office 365-hosted business email account that was used by a medical assistant.
-
Associated Press
November 2, 2023
The Associated Press news website (apnews) is hit with a DDoS attack.
-
Cogdell Memorial Hospital
November 1, 2023
•
[ ransomware, malware, healthcare ]
The Cogdell Memorial Hospital announces to be experiencing a computer network incident that prevents the hospital from accessing some of its systems and severely limiting the operability of its phone system. The Lorentz ransomware group claims responsibility for the attack.
-
Smoothie King
October 31, 2023
•
[ hack, retail ]
SK USA (Smoothie King) files a notice of data breach after discovering that an unauthorized party was able to access confidential information that had been entrusted to the company.
-
Avangate
October 31, 2023
•
[ ransomware, malware, technology ]
The Alpha Team ransomware gang claims responsibility for a cyber attack to Avangate.
-
U.S. Department of Defense
October 30, 2023
The email addresses of about 632,000 employees from the Justice and Defense departments were accessed in the massive MOVEit hack affecting the Office of Personnel Management.
-
Sadwestfalen IT
October 30, 2023
•
[ ransomware, malware, government ]
A threat actor encrypts the servers of the local municipal service provider Sadwestfalen IT. To prevent the malware from spreading, the company restricts access to its infrastructure for over 70 municipalities, primarily in the western German state of North Rhine-Westphalia.
-
Quertaro Intercontinental Airport
October 30, 2023
•
[ ransomware, malware ]
The Quertaro Intercontinental Airport confirms reports that it had been attacked. The LockBit ransomware gang claims responsibility for the attack.
-
Manchester Airport
October 30, 2023
•
[ hack, ddos, government ]
The Russian group UserSec claims responsibility for taking down the Gatwick Airport website.
-
Manchester Airport
October 30, 2023
•
[ hack, ddos, government ]
The Russian group UserSec claims responsibility for taking down the Manchester Airport website.
-
Five Guys
October 27, 2023
•
[ hack, retail ]
Five Guys discloses a security breach where hackers gained access to the email accounts of two employees.
-
Southeastern Orthopaedic Specialists
October 25, 2023
•
[ ransomware, malware, healthcare ]
Southeastern Orthopaedic Specialists is added to the NoEscape ransomware gang leak site. The threat actors claim to have exfiltrated 3 GB of data.
-
Fredericksburg Foot & Ankle Center
October 25, 2023
•
[ leak, healthcare ]
Fredericksburg Foot & Ankle Center reports a data breach that has affected up to 14,912 individuals.
-
Allen Park Public Schools
October 25, 2023
•
[ hack, malware, education ]
Allen Park Public Schools in Michigan shuts down portions of its network and cancels classes after discovering a cybersecurity threat.
-
ViLab
October 23, 2023
•
[ hack, healthcare ]
The hacktivists from CYBER ERROR SYSTEM deface the website of ViLab.
-
New York Life Insurance Company (NYLIC)
October 23, 2023
Andesa Services ("Andesa") files a notice of data breach on behalf of New York Life Insurance Company ("New York Life") after confirming that the widely-known MOVEit vulnerability impacted more than 30,000 New York Life policyholders.
